GHSA-HW2P-XQHQ-3MJF Cross site scripting in mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

@boundless-inc/ember-mobiledoc-editor (0.5.13-boundless), @cardstack/mobiledoc (>=0.0.1, <=0.13.50) +21 more potentially affected by CVE-2022-2932 via mobiledoc-kit (>=0.6.0-beta4, <=0.12.5)

mobiledoc-kit NPM version =0.6.0-beta4, =0.0.1, =0.0.29, =0.1.0, =0.1.22, =0.1.6, =0.0.2, =0.4.4, =0.14.3, =0.6.3, =0.1.18, =0.0.14, =0.7.5, =0.14.2 - cardstack-cms 0.0.1 - cardstack-editor 0.0.2 and more Source cves: CVE-2022-2932 Source advisory: OSV:GHSA-HW2P-XQHQ-3MJF...

@boundless-inc/ember-mobiledoc-editor (0.5.13-boundless), @cardstack/mobiledoc (>=0.0.1, <=0.13.50) +21 more potentially affected by CVE-2022-2932 via mobiledoc-kit (>=0.6.0-beta4, <=0.12.5)

mobiledoc-kit NPM version =0.6.0-beta4, =0.0.1, =0.0.29, =0.1.0, =0.1.22, =0.1.6, =0.0.2, =0.4.4, =0.14.3, =0.6.3, =0.1.18, =0.0.14, =0.7.5, =0.14.2 - cardstack-cms 0.0.1 - cardstack-editor 0.0.2 and more Source cves: CVE-2022-2932 Source advisory: GHSA-HW2P-XQHQ-3MJF...

Cross site scripting in mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932

CVE-2022-2932 is a reflected XSS in mobiledoc-kit before 0.14.2. Public sources (GitHub/bustle/mobiledoc-kit, OSVGHSA, NVD) consistently describe the vulnerability as a client-side XSS via input processed by the library’s rendering chain, with the likely root cause in URL sanitization logic in th...

@boundless-inc/ember-mobiledoc-editor (0.5.13-boundless), @cardstack/mobiledoc (>=0.0.1, <=0.13.50) +21 more potentially affected by CVE-2022-2932 via mobiledoc-kit (>=0.6.0-beta4, <=0.12.5)

mobiledoc-kit NPM version =0.6.0-beta4, =0.0.1, =0.0.29, =0.1.0, =0.1.22, =0.1.6, =0.0.2, =0.4.4, =0.14.3, =0.6.3, =0.1.18, =0.0.14, =0.7.5, =0.14.2 - cardstack-cms 0.0.1 - cardstack-editor 0.0.2 and more Source cves: CVE-2022-2932 Source advisory: MEND:CVE-2022-2932...

CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

PT-2022-4453

Name of the Vulnerable Software and Affected Versions mobiledoc-kit versions prior to 0.14.2 Description The issue is related to a Cross-site Scripting XSS vulnerability, specifically a Reflected XSS. This occurs due to insufficient protection of the web page structure in the Mobiledoc Kit WYSIWY...

MobileDoc-Kit cross-site scripting vulnerabilities

mobiledoc-kit is an American Bustle open source toolkit for building WYSIWYG editors using Mobiledoc. A cross-site scripting vulnerability exists in versions of mobiledoc-kit prior to 0.14.2. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2022-2932: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_make_data_run

Project: https://github.com/sleuthkit/sleuthkit.git Detailed Report: https://oss-fuzz.com/testcase?key=4761036015665152 Project: sleuthkit Fuzzing Engine: honggfuzz Fuzz Target: sleuthkitflsntfsfuzzer Job Type: honggfuzzasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

CVE-2022-34345

Improper input validation in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-27493

Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access...

CLSA-2022-1660810242 Fix CVE(s):

Security fixes: - JDK-8148005: One byte may be corrupted by getdatetimestring...

CVE-2022-21229: Undefined Security Weakness

Improper buffer restrictions for some IntelR NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-14937 · Intel · Intel Nuc 9 Extreme Laptop Kit Drivers

Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kit drivers versions prior to 2.2.0.22 Description: The issue is related to improper buffer restrictions in some IntelR NUC 9 Extreme Laptop Kit drivers, which may allow an authenticated user to potentially enable...